1. Who is responsible for your data
Vital1 provides the Vital 14-Day Energy & Metabolism Reset at vital14reset.com and is the data controller for the personal data described here — meaning we decide how and why it's used.
2. What we collect and why
- Account details (email, login credentials, first name) — to create your account and give you access. Basis: performing our contract with you.
- Onboarding answers (main goal, activity level, workout length, dietary preferences, biggest challenge) — to tailor the program. Basis: contract.
- Check-in data you choose to enter (completed days, water, movement, sleep hours, energy and mood scores, optional weight, reflections) — to show your progress. Basis: contract and your consent; you can leave optional fields blank.
- Purchase records (what you bought, when, amount, order reference) — to unlock access and handle refunds. Basis: contract and legal obligations.
- Support messages — to answer you. Basis: legitimate interests.
- Technical data (IP address, device and browser information, basic usage logs) — to keep the service secure and working. Basis: legitimate interests.
Card details are entered directly with our payment reseller (see below); we never see or store your full card number.
3. Who we share it with
- Paddle — our Merchant of Record, which processes the sale, payments, tax compliance, invoicing and refunds.
- Service providers who host the app, store data and provide sign-in, acting on our instructions.
- Professional advisers (such as legal or accounting) where needed.
- Authorities where we're required to by law.
We don't sell your personal data.
4. How long we keep it
We keep your account and check-in data while your account is active so you can return to the program. Purchase records are kept as long as needed for tax and accounting obligations. When data is no longer needed, we delete or anonymise it. You can ask us to delete your account at any time.
5. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the use of your data, to receive a copy of it, and to withdraw consent at any time. You may also complain to your local data protection authority. Contact us using the support details on our Refund & Access page and we'll respond within one month.
6. International transfers
Our providers may process data outside your country. Where this happens, we rely on appropriate safeguards such as standard contractual clauses.
7. Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections, access controls, and limiting who can see member data.
8. Cookies and local storage
We use only essential storage needed to keep you signed in and the app working. We don't use advertising cookies.
9. Changes
We may update this policy. The "last updated" date above shows when it last changed.